Suggested Answer:A🗳️
A system admin can grant permission to the S3 objects or buckets to any user or make objects public using the bucket policy and user policy. Both use the JSON- based access policy language. Generally, if the user is defining the ACL on the bucket, the objects in the bucket do not inherit it and vice a versa. The bucket policy can be defined at the bucket level which allows the objects as well as the bucket to be public with a single policy applied to that bucket. It cannot be applied at the object level.
They are not different answers, actually the answer can be combined for the policy. Which is
A. It is not possible to define a policy at the object level
B. It will throw an error for teh wrong action and does not allow the saw policy.
Answer is A. It is not possible to define a policy at the object level, that policy shpuld be something like this:
{
"Version":"2012-10-17",
"Statement":[
{
"Effect":"Allow",
"Action":["s3:ListBucket"],
"Resource":"arn:aws:s3:::cloudacademy"
},
{
"Effect":"Allow",
"Action":[
"s3:GetObject",
"s3:GetObjectAcl",
],
"Resource":"arn:aws:s3:::cloudacademy/*.jpg"
}
]
}
Bucket and object permissions are independent of each other. An object does not inherit the permissions from its bucket. For example, if you create a bucket and grant write access to a user, you can't access that user’s objects unless the user explicitly grants you access. Bucket permissions generally allow a user to list information about a bucket and add and delete objects from a bucket. Object permissions generally allow a user to download, replace or delete objects.
https://docs.aws.amazon.com/AmazonS3/latest/user-guide/set-permissions.html
Ans C
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
sen12
Highly Voted 7 months, 1 week agoRicardoD
Most Recent 6 months agonafazoline
6 months, 1 week agolemist
6 months, 1 week agolemist
6 months, 3 weeks agoabhishek_m_86
6 months, 3 weeks agojackdryan
6 months, 3 weeks agoBossSMT
7 months agosen12
7 months, 1 week agoFebe
7 months, 2 weeks ago